DriverProc
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
2687567d5ca7123603c4c61e5324a256079278f63d81c07d44fde36034ab1140.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2687567d5ca7123603c4c61e5324a256079278f63d81c07d44fde36034ab1140.dll
Resource
win10v2004-20220812-en
Target
2687567d5ca7123603c4c61e5324a256079278f63d81c07d44fde36034ab1140
Size
55KB
MD5
62389e04c0c0406cc44fd4fb3aae9880
SHA1
86b74056f5f12949aa7a00b91b168b679abe8f4d
SHA256
2687567d5ca7123603c4c61e5324a256079278f63d81c07d44fde36034ab1140
SHA512
85aec137cff19cbc67e30c07972eee006f26814e37be9f8643dc9193887e44831c00f574d8fcb5e4a47eed47d2ea95717ceffd4262ab8d95c0c1fdff351c0f88
SSDEEP
384:re4DXuCTC+9BzGVKi46Z+cb226S8EOtqJXWxUxyIw6IBl13k2YyTsvrtfhPp+Tj:fDXu0V3zGNSS8Eh4UoZkasTTPoTj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DriverProc
modMessage
modmCallback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE